CVE-2010-5049: SQL Injection
Published Nov 23, 2011
·Updated
SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the navtime parameter.
Affected Software
55 affected components
Zabbix Zabbix=1.6.1
Zabbix Zabbix=1.1-beta2
Zabbix Zabbix=1.1.2
Zabbix Zabbix=1.7.4
Zabbix Zabbix=1.5.3-beta
Zabbix Zabbix=1.1.4
Zabbix Zabbix=1.1.6
Zabbix Zabbix=1.4.3
Zabbix Zabbix=1.6.5
Zabbix Zabbix=1.4.6
Zabbix Zabbix=1.6.8
Zabbix Zabbix=1.1-beta4
Zabbix Zabbix=1.7.1
Zabbix Zabbix=1.4.4
Zabbix Zabbix=1.5.1-beta
Zabbix Zabbix=1.1
Zabbix Zabbix=1.3.7-beta
Zabbix Zabbix=1.7.2
Zabbix Zabbix=1.8
Zabbix Zabbix=1.6.3
Zabbix Zabbix=1.1-beta3
Zabbix Zabbix=1.3.1-beta
Zabbix Zabbix=1.3.2-beta
Zabbix Zabbix=1.6.2
Zabbix Zabbix=1.7
Zabbix Zabbix=1.3.5-beta
Zabbix Zabbix=1.1.7
Zabbix Zabbix=1.6
Zabbix Zabbix=1.6.7
Zabbix Zabbix=1.6.4
Zabbix Zabbix=1.1-beta9
Zabbix Zabbix=1.1-beta10
Zabbix Zabbix=1.3.8-beta
Zabbix Zabbix=1.7.3
Zabbix Zabbix=1.1-beta6
Zabbix Zabbix=1.3.6-beta
Zabbix Zabbix=1.5.4-beta
Zabbix Zabbix<=1.8.1
Zabbix Zabbix=1.1.1
Zabbix Zabbix=1.1-beta8
Zabbix Zabbix=1.1-beta11
Zabbix Zabbix=1.1-beta7
Zabbix Zabbix=1.1.3
Zabbix Zabbix=1.6.6
Zabbix Zabbix=1.6.9
Zabbix Zabbix=1.4.5
Zabbix Zabbix=1.3.4-beta
Zabbix Zabbix=1.1-beta5
Zabbix Zabbix=1.5-beta
Zabbix Zabbix=1.4.2
Zabbix Zabbix=1.1-beta12
Zabbix Zabbix=1.1.5
Zabbix Zabbix=1.5.2-beta
Zabbix Zabbix=1.3.3-beta
Zabbix Zabbix=1.3-beta
Event History
Nov 23, 2011
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-5049?
CVE-2010-5049 is classified as a high severity vulnerability due to its potential for remote SQL command execution.
2
How do I fix CVE-2010-5049?
To fix CVE-2010-5049, upgrade to Zabbix version 1.8.2 or later, which patches the SQL injection vulnerability.
3
What versions of Zabbix are affected by CVE-2010-5049?
CVE-2010-5049 affects Zabbix versions 1.1 through 1.8.1.
4
Can CVE-2010-5049 be exploited remotely?
Yes, CVE-2010-5049 can be exploited remotely, allowing attackers to execute arbitrary SQL commands.
5
What files are affected by CVE-2010-5049?
The vulnerability in CVE-2010-5049 specifically affects the events.php file in Zabbix.